<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
</style>
</head>
<body class='hmmessage'>
<BR>
I did do that, but if i add Auth-Type := Accept, i still want to validate the IP sent in h323-remote-address. Also, i will want to want to run a couple of SQL queries which also determine whether or not the user should be authenticated. Is it possible to get radius to authenticate a user against a custom script?<BR>
<BR>
Thanks<BR> <BR>> Date: Thu, 11 Jun 2009 00:01:09 +0100<BR>> Subject: Re: Remote IP Authentication<BR>> From: tnt@kalik.net<BR>> To: barnyritchley@technologist.com; freeradius-users@lists.freeradius.org<BR>> <BR>> > I cant find any info on the Cisco-compatible Remote IP authentication<BR>> > method.<BR>> ><BR>> > I have looked everywhere and cannot see how to authenticate by<BR>> > h323-remote-address to freeradius.<BR>> ><BR>> ><BR>> ><BR>> > The Radius Request looks like:<BR>> ><BR>> ><BR>> ><BR>> > User-Name = '2001'<BR>> > Calling-Station-Id = '2001'<BR>> > Called-Station-Id = '012356789'<BR>> > h323-remote-address = '172.101.91.1<BR>> ><BR>> <BR>> That's it? No password?<BR>> <BR>> ><BR>> > i want to check against the h323-remote-address. If it is an ip which is<BR>> > stored against a username, then the authentication should be successful.<BR>> ><BR>> ><BR>> ><BR>> > i am using MySQL and i tried adding this to the radcheck table:<BR>> ><BR>> ><BR>> ><BR>> > attribute: h323-remote-address<BR>> ><BR>> > op: ==<BR>> ><BR>> > value: 172.101.91.1<BR>> ><BR>> <BR>> That's like mac authentication with no password then. Add Auth-Type :=<BR>> Accept to radcheck for the same user.<BR>> <BR>> Ivan Kalik<BR>> Kalik Informatika ISP<BR>> <BR>> -<BR>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<BR></body>
</html>